four-years-of-spam-mail/spam/1579343937.M506411P15642.sp...

129 lines
5.5 KiB
Plaintext
Raw Permalink Blame History

This file contains ambiguous Unicode characters!

This file contains ambiguous Unicode characters that may be confused with others in your current locale. If your use case is intentional and legitimate, you can safely ignore this warning. Use the Escape button to highlight these characters.

Received: from localhost by v22014122474822114.stilfilm.com
with SpamAssassin (version 3.3.2);
Wed, 22 Nov 2017 21:02:08 +0100
From: "Anastasia" <Anastasiapfylb@saberinfo.net.br>
To: <eula_garcia@gs-gronau.de>
Subject: *****SPAM***** ***SPAM*** How are you?
Date: Tue, 01 Aug 2017 15:24:22 -0200
Message-Id: <8400433199.794104807305227640.JavaMail.root@saberinfo.net.br>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
v22014122474822114.stilfilm.com
X-Spam-Flag: YES
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.9 required=5.0 tests=CK_HELO_DYNAMIC_SPLIT_IP,
HELO_DYNAMIC_IPADDR2,PYZOR_CHECK,RCVD_IN_BRBL_LASTEXT,RDNS_NONE,URIBL_BLOCKED
autolearn=no version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5A15D7C0.86845BC2"
This is a multi-part message in MIME format.
------------=_5A15D7C0.86845BC2
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Software zur Erkennung von "Spam" auf dem Rechner
v22014122474822114.stilfilm.com
hat die eingegangene E-mail als mögliche "Spam"-Nachricht identifiziert.
Die ursprüngliche Nachricht wurde an diesen Bericht angehängt, so dass
Sie sie anschauen können (falls es doch eine legitime E-Mail ist) oder
ähnliche unerwünschte Nachrichten in Zukunft markieren können.
Bei Fragen zu diesem Vorgang wenden Sie sich bitte an
the administrator of that system
Vorschau: Hi! How are you? My name is Anastasia (or shortly Nastya),
and Id love to know your name. Do you visit this site oftentimes? I was
hoping to talk to you in chat once but you left all of a sudden. Could you
write me your address or send me a letter some day? I believe we have a lot
in common and talking to you will be much pleasure for me. [...]
Inhaltsanalyse im Detail: (8.9 Punkte, 5.0 benötigt)
Pkte Regelname Beschreibung
---- ---------------------- --------------------------------------------------
1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[177.91.112.202 listed in bb.barracudacentral.org]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: gmx.com]
0.1 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
2.0 PYZOR_CHECK Gelistet im Pyzor-System (http://pyzor.sf.net/)
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
3.9 HELO_DYNAMIC_IPADDR2 HELO-Rechnername verdächtig (IP-Adresse 2)
Die ursprüngliche Nachricht enthielt nicht ausschließlich Klartext
(plain text) und kann eventuell eine Gefahr für einige E-Mail-Programme
darstellen (falls sie z.B. einen Computervirus enthält).
Möchten Sie die Nachricht dennoch ansehen, ist es wahrscheinlich
sicherer, sie zuerst in einer Datei zu speichern und diese Datei danach
mit einem Texteditor zu öffnen.
------------=_5A15D7C0.86845BC2
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Return-Path: <Anastasiapfylb@saberinfo.net.br>
Delivered-To: mail@dorianvasco.de
Received: from localhost (localhost [127.0.0.1])
by v22014122474822114.stilfilm.com (Postfix) with ESMTP id 46657D4934
for <mail@dorianvasco.de>; Tue, 1 Aug 2017 20:24:19 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at v22014122474822114.yourvserver.net
X-Spam-Flag: YES
X-Spam-Score: 10.274
X-Spam-Level: **********
X-Spam-Status: Yes, score=10.274 required=5.5 tests=[BAYES_99=3.5,
BAYES_999=0.2, CK_HELO_DYNAMIC_SPLIT_IP=0.001,
HELO_DYNAMIC_IPADDR2=3.607, PYZOR_CHECK=1.392, RDNS_NONE=0.793,
SPF_NEUTRAL=0.779, TVD_RCVD_IP=0.001, URIBL_BLOCKED=0.001]
autolearn=no
Received: from v22014122474822114.stilfilm.com ([127.0.0.1])
by localhost (v22014122474822114.stilfilm.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id u9Pdg6umkWCB for <mail@dorianvasco.de>;
Tue, 1 Aug 2017 20:24:17 +0200 (CEST)
Received: from 177-91-112-202.saberinfo.net.br (unknown [177.91.112.202])
by v22014122474822114.stilfilm.com (Postfix) with ESMTP id 1AC07C2CB3
for <eula_garcia@gs-gronau.de>; Tue, 1 Aug 2017 20:24:16 +0200 (CEST)
Received: from smtpd (localhost.localdomain [127.0.0.1]) by saberinfo.net.br
(Postfix) with ESMTP id 55BAC8D59650
for <eula_garcia@gs-gronau.de>; Tue, 01 Aug 2017 15:24:22 -0200
Date: Tue, 01 Aug 2017 15:24:22 -0200
From: "Anastasia" <Anastasiapfylb@saberinfo.net.br>
To: <eula_garcia@gs-gronau.de>
Message-ID: <8400433199.794104807305227640.JavaMail.root@saberinfo.net.br>
Subject: ***SPAM*** How are you?
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_Part_25401_34956036.2297706846505"
------=_Part_25401_34956036.2297706846505
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Hi! How are you?
My name is Anastasia (or shortly Nastya), and I=92d love to know your =
name.
Do you visit this site oftentimes? I was hoping to talk to you in chat =
once but you left all of a sudden. Could you write me your address or =
send me a letter some day?
I believe we have a lot in common and talking to you will be much =
pleasure for me.
My email leyliloscid@gmx.com
Looking forward to getting your letter,
Anastasia
------=_Part_25401_34956036.2297706846505--
------------=_5A15D7C0.86845BC2--